Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
File:                     xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json)
Hash identifier:          1z81RBT/QUmVtcLIPn61pKhSqCvkQh6AL9BZuXCiS5E=
Subject key identifier:   82:67:72:9A:EB:34:E9:AE:65:69:89:07:92:91:07:7B:C6:4E:D4:25
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Certificate issuer:       /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial:       019F916D1298B8B167DC9A0A62D7D4F63526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
Manifest number:          1858
Signing time:             Fri 24 Jul 2026 00:01:12 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:12 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:12 +0000
Files and hashes:         1: 0dcnrV30Gn7pa5jEvj5KgP9qiO0.roa (hash: A5Y7w1IBePH5KEnAB3b2HcWOuDVZjoYUDuccSlddMpw=)
                          2: XA8IG6QRQrLsbNV64R-2HjyZbEg.roa (hash: MAJTuBGRkQWXta5nAROoMjVqytepn5bG0MlABDfwKjU=)
                          3: kReZeiKYeK227CwdOt2peWbzn6o.roa (hash: vijDgPLigLiF+q+U/7SVmc/WWIgze2Hy8w525GeqVG8=)
                          4: l7CfLnkZArXswZfoQeoUIu_AgpA.roa (hash: RNWlpQMRGNEnmwW1gZu/IBscvvbH2tY8tCACNrgrNfA=)
                          5: mVQ9FPpVueUhksm65G9KzIV5UC8.roa (hash: aeiYkQy+Q1DkLgKvsKV+KpeuzrUpSXnXOD5PPgZsPjM=)
                          6: x2-bHgYNNe9EO0e71Kbdkn4WCUs.roa (hash: Dca0K3UX+EGLfg7iHsshpljIoglUEEQdeXIYfckXkFA=)
                          7: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: m11riCJmO5oJz5QtMpKfYx/CxARWf7ZiNLpl9/QtGl8=)
                          8: yCcfya-jB3S-Fhloi_JZSoWRN1w.roa (hash: 8VHySyEqz9LaoooRkHWLcdlgezRWIk8QkynQdc9lQz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:12:98:b8:b1:67:dc:9a:0a:62:d7:d4:f6:35:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
        Validity
            Not Before: Jul 24 00:01:12 2026 GMT
            Not After : Jul 25 00:01:12 2026 GMT
        Subject: CN=8267729aeb34e9ae656989079291077bc64ed425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:34:8a:1e:50:8a:a2:6f:a6:43:a1:60:b4:00:
                    25:64:03:67:fe:42:e2:7f:dd:44:53:7d:68:8f:df:
                    f7:f0:ca:78:d0:d5:a0:c0:73:48:2f:7a:35:93:2b:
                    8f:e0:99:c2:1b:16:14:8d:f9:23:f8:44:5a:b0:65:
                    a4:b0:89:d7:64:6c:13:2e:79:22:16:cc:75:f9:54:
                    10:af:cf:b4:f3:59:40:9e:21:54:02:bb:7b:62:5d:
                    3c:39:67:23:df:17:32:19:ec:b0:a0:d2:de:dd:fa:
                    02:5d:3e:0e:1f:26:af:7f:31:f6:e4:17:73:61:28:
                    f4:25:ef:9e:86:aa:52:3e:99:74:51:4b:bc:73:3b:
                    74:0c:fd:7a:45:4d:4b:f8:5d:ca:be:63:d3:ec:b7:
                    00:8d:98:39:d0:a9:40:3d:85:a0:89:23:45:42:12:
                    6c:69:4c:c5:83:73:f8:f9:f2:06:c9:47:a9:38:b5:
                    88:fc:fb:12:23:df:7b:2a:ab:de:c2:8f:49:03:5a:
                    4f:0c:d4:c4:cb:f0:8b:4b:c0:e7:bc:2a:76:4b:e9:
                    5d:92:95:4f:67:8e:3a:f0:10:1a:86:3d:9d:68:d8:
                    75:33:85:24:4b:ee:a2:f3:ae:5a:0e:4c:6d:38:44:
                    5d:5e:ec:c1:46:98:29:e6:6c:ae:74:64:03:86:ae:
                    f6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:67:72:9A:EB:34:E9:AE:65:69:89:07:92:91:07:7B:C6:4E:D4:25
            X509v3 Authority Key Identifier:
                keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:85:29:a2:de:2e:7a:be:bf:d0:4e:9b:cf:d7:37:86:45:ce:
         fd:56:ac:f3:e1:96:f5:4d:98:3c:d9:17:33:d0:2b:db:ab:3b:
         ab:b2:b0:d4:c4:80:81:b1:62:98:83:cd:ed:55:c5:74:81:62:
         fb:81:52:bb:f9:74:1e:f3:9e:d8:de:b3:53:90:41:1f:64:9a:
         6a:46:a8:9a:d5:53:9a:db:dc:ef:14:e5:e7:9e:a6:90:51:92:
         14:7f:51:ef:f1:db:18:19:c3:dc:18:15:c1:cd:c6:36:e8:32:
         5f:27:25:d7:46:89:aa:6f:e1:af:79:36:d9:95:5b:c6:d3:dd:
         5e:fb:2c:63:cd:b0:64:b5:f1:39:8e:69:0a:c8:c6:97:43:8a:
         4b:07:89:52:2e:cc:3e:63:f3:14:e1:fb:da:3a:14:df:f7:fb:
         5b:06:c1:8d:d8:1e:9d:bd:48:8a:5c:3e:df:68:42:a0:b2:08:
         2c:88:43:6a:de:03:21:80:33:41:55:4d:c3:24:06:8e:1c:47:
         a7:6e:85:7d:f3:e0:7b:29:dd:47:90:de:69:a2:90:f1:d5:ea:
         be:44:e4:aa:09:6a:76:03:2f:83:8d:57:43:f5:e2:99:c6:3b:
         8b:af:f7:78:87:76:8a:f1:7f:e0:5a:30:6d:bd:3f:5b:a8:f6:
         ad:b4:99:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:21 2026 by rpki-client